337260351debf1dd85d1c7317149226b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

337260351debf1dd85d1c7317149226b_JaffaCakes118
Size

1.2MB
MD5

337260351debf1dd85d1c7317149226b
SHA1

add062e26ab926a8465438ba23c7b973b566129b
SHA256

1dd47a5116e50fcdf00f36ea605f9c8a54c804eb523fe122953f14597758ffe4
SHA512

861531c53a27ca041216d9106e5436846b0f8190f6ba50b40ce82741c57604abf45472e2ff6347752bcaea7d2e9b567d85fb8e3d785ee1bcb12cf0d34c08c33f
SSDEEP

24576:z7iGBx8bNg8nkzpPieXm9Sec14E5dhGhnCQPumbzBnC7Kz:zeG0yu6kzZC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337260351debf1dd85d1c7317149226b_JaffaCakes118

Files

337260351debf1dd85d1c7317149226b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\AymenTLILI\source\repos\WindowsFormsApp2\WindowsFormsApp2\obj\Release\WarmHole.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1014KB - Virtual size: 1014KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ